
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84804039-02e5-4321-8c76-7192d60f09c3.roa
File: 84804039-02e5-4321-8c76-7192d60f09c3.roa (raw, json)
Hash identifier: eD8XXg1f+mKevKEAWf4dr/+TdOSvULybWtbhdsNF5z4=
Subject key identifier: 47:21:EF:7A:36:0E:C6:BC:E4:90:21:7C:19:3B:32:80:8B:2A:83:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4221350032B092407EC73CDBB9DA726FC6FDD8B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84804039-02e5-4321-8c76-7192d60f09c3.roa
Signing time: Mon 19 Oct 2026 01:30:39 +0000
ROA not before: Mon 19 Oct 2026 01:30:39 +0000
ROA not after: Sun 17 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:21:35:00:32:b0:92:40:7e:c7:3c:db:b9:da:72:6f:c6:fd:d8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:30:39 2026 GMT
Not After : Jan 17 23:59:59 2027 GMT
Subject: serialNumber=936fed61415662eb7522a6ff950d86dbe29cf5af79bf665e6a8574e4905facf8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:d7:79:38:3b:2e:d3:87:03:1a:5f:7a:48:
21:6a:91:eb:c3:7e:c1:bf:5c:87:e9:c0:e0:76:51:
4a:13:c4:34:b0:2a:cc:99:74:77:71:f8:7f:86:77:
68:9b:01:99:d6:8f:44:00:7a:36:94:17:8b:0e:23:
27:c2:61:d9:a4:3d:b6:f7:da:5e:f1:bd:c7:66:1c:
25:c4:1c:a8:6b:fb:7e:5a:50:03:d4:b3:a0:d8:39:
a7:ab:15:9d:ce:5a:34:13:eb:81:bc:02:33:b6:d1:
c8:ec:a9:78:33:c6:95:49:f1:f4:a3:ba:7f:1d:e3:
47:f2:c4:a9:54:bc:5d:75:dd:c5:0d:1e:f5:3c:bc:
a8:b3:56:c6:f6:c1:0b:4a:15:c4:e4:8f:d8:36:da:
82:e7:e5:cb:d7:b0:6f:d5:28:4f:d1:c5:40:26:a9:
93:01:40:d9:db:1b:63:08:33:42:18:52:48:33:00:
53:1f:b8:31:29:c5:a6:55:0d:bc:f7:27:e1:a8:6d:
7c:ba:64:8f:75:41:ee:cf:94:41:6a:97:76:8a:a2:
37:9b:1e:2e:2e:84:5c:ec:92:c0:46:ec:66:ed:12:
ed:12:c8:e4:a4:85:19:a6:84:51:37:75:08:d3:0d:
bc:ad:f3:89:d2:34:11:d6:be:56:63:11:b8:f0:99:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:21:EF:7A:36:0E:C6:BC:E4:90:21:7C:19:3B:32:80:8B:2A:83:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84804039-02e5-4321-8c76-7192d60f09c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.15.0/24
Signature Algorithm: sha256WithRSAEncryption
13:48:c7:1e:8a:38:2d:ef:4d:e8:5f:e7:eb:43:49:f4:34:56:
91:ab:0f:48:92:28:db:76:57:1c:aa:a4:c9:bb:79:7b:70:5b:
74:a9:dc:4a:06:94:a4:f4:fa:9b:7e:b1:bc:a8:87:f6:f0:7a:
5a:17:bd:45:47:15:eb:ae:fb:3f:ba:c9:99:30:5e:75:4b:d2:
6f:a9:f4:41:39:05:13:73:07:68:5d:b9:c9:db:cb:e1:09:9e:
de:1c:1c:e5:c9:d6:92:64:b8:01:15:89:11:03:23:ff:77:7b:
87:e4:80:a7:e6:90:e9:56:ca:b5:8a:e8:b2:f3:c2:ac:00:81:
cf:57:14:df:3c:ed:f8:3f:15:d5:58:fb:bd:42:b0:92:c6:e6:
59:79:2c:30:e0:0d:3b:06:26:78:1a:55:f3:5a:27:2f:d1:d2:
97:a0:0e:93:35:d4:68:e0:c0:a1:de:3c:3d:73:e3:3c:3f:aa:
6f:31:b6:97:57:96:17:ea:05:e5:f7:da:d8:46:28:cb:41:6a:
c8:3d:71:83:0d:a4:08:34:aa:00:b8:42:ad:ba:36:d3:56:fd:
6f:68:81:d5:b1:2a:16:9e:2f:ad:4b:db:1c:79:91:66:f7:65:
4e:f4:8b:16:29:1d:f6:cf:15:d9:fd:82:d2:89:f2:a1:7c:73:
da:a1:32:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:14:38 2026 by rpki-client